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Please amend the claims as follows: 



1. (currently amended) Apparatus for providing information in -as a response to a query on a 
virtual database table, wh e r e the qu e ry and the r e sponse th e reto have d e fin e d forms, the query 
b e ing address e d to a databas e the virtual database table havin gappearing to have at l e ast on e 
rew one or more rows, each row having at l e ast on e named fiold one or more fields , the query 
including at l e ast on e field nam e a field name of the named fields to sp e cify th e information to be 
provid e d in th e respons e and an indication of a manner of selecting a row of the rows containing 
th e information from th e database tabl e , and 
the apparatus comprising: 

a virtual database service; and 

an information source for the information to be provided which does not us e th e named 
field to id e ntify th e information to b e provided , 

the virtual database service receiving the querv,-using - responding to the field name and the 
indication of the manner of selecting a row as required to obtain the information to be provided 
from the information source, and providing the information in- as the value of the field indicated by 
the field name in the selected row t h e r e spons e, 

whereby the apparatus presents a4he virtual database table of th e form address e d by the qu e ry to a 
source of the query . 



1 2. (original) The apparatus set forth in claim 1 wherein: 

2 the indication of a manner of selecting a row includes a selection value; and 

3 the information source provides a component of the information to be provided in response to a 

4 match between the selection value and a pattern that matches a plurality of values and is 

5 accessible to the information source. 



1 3. (original) The apparatus set forth in claim 1 wherein: 

2 the query is an SQL query addressing the database table; 

3 the field name is contained in a SELECT clause in the query; and 

4 the indication of the manner of selecting a row is contained in a WHERE clause in the 

5 query. 
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1 4. (original) The apparatus set forth in claim 1 wherein: 

2 the information source is an access evaluator which determines whether a user may have 

3 access to an information resource; 

4 the manner of selecting the row includes information from which the user and the 

5 information resource may be determined; and 

6 the provided information includes an indication of whether the user determined from the 

7 information may access the information resource determined therefrom. 



1 5. (original) The apparatus set forth in claim 4 wherein: 



2 the access evaluator determines whether the user may have access to the information 

3 resource by considering one or more access policies, each access policy indicating whether a user 

4 group may have access to a set of information resources and access by the user to the information 

5 resource being allowed when the access policies for the user groups to which the user belongs and 

6 the sets of information resources to which the information resource belongs so indicate; and 

7 the manner of selecting the row contains membership information about the user from 

8 which membership of the user in a user group may be determined. 

1 6. (original) The apparatus set forth in claim 5 wherein: 

2 the access evaluator uses the membership information to determine membership of the user 

3 in a user group. 

1 7. (original) The apparatus set forth in claim 6 wherein: 

2 the access evaluator determines that there may be a user group such that membership in the 

3 user group would give the user access to the information resource; and 

4 the provided information indicates a method of providing further information about the 

5 user in a further query from which the user's membership in the user group can be determined. 

1 8. (original) The apparatus set forth in claim 7 wherein: 

2 the further information includes authentication information which may be used to validate 

3 the user's identity. 
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1 9. (original) The apparatus set forth in claim 8 further comprising: 

2 an additional information source that is an authenticator, the authenticator using the 

3 authentication information to validate the user's identity. 

1 10. (original) The apparatus set forth in claim 9 wherein: 

2 the response to the further query provides an indication whether the user's identity is 

3 valid. 

1 11. (original) The apparatus set forth in claim 5 further comprising: 

2 an additional information source that is a user profile information source which provides 

3 additional information about the user; 

4 the information about the user includes a user information retrieval method specification 

5 that specifies how the user profile information source provides the additional information; and 

6 the access evaluator uses at least some of the additional information to determine 

7 membership of the user in the user group. 

1 12. (original) The apparatus set forth in claim 5 further comprising: 

2 an additional information source that is an authenticator which validates the identity of the 

3 user; 

4 the authenticator uses the membership information to validate the identity of the user; and 

5 the access evaluator determines membership of the user in a user group only after the 

6 authenticator has validated the user's identity. 

1 13. (original) The apparatus set forth in claim 4 further comprising: 

2 an additional information source that is an authenticator which validates an identity of the 

3 user; 

4 the manner of selecting the row includes authentication information which the 

5 authenticator uses to validate the user's identity; and 

6 the provided information is obtained at least in part from the authenticator and includes an 

7 indication of whether the user's identity is valid. 
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1 14. (original) The apparatus set forth in claim 4 further comprising: 

2 an additional information source that is a user profile information source which provides 

3 additional information about the user; 

4 the manner of selecting the row includes profile information gathering information which 

5 indicates to the profile information source how to gather the profile information; and 

6 the provided information is obtained at least in part from the profile information source 

7 and includes the profile information. 
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